DNS Tunneling with Burp Collaborator

Indirect prompt injection hides malicious instructions in content LLMs later read—email footers, PDFs, web pages. Real Microsoft 365 Copilot attacks make defense in depth and AI monitoring essential.

A technical walkthrough of XPath injection: how unvalidated input in XML queries enables authentication bypass and data theft, with a vulnerable lab and Burp Suite techniques for identifying the flaw.

A three-part video series demystifies Burp Suite macros: capturing dynamic values like CSRF tokens, chaining sessions, and automating complex multi-request scenarios, with practice labs included.

Part two of an anti-scraping series applies rate limits, generic errors, and data caps to a demo message board, then shows how scrapers adapt, proving defense in depth beats any single control.

NetSPI surveyed its 300-plus pentesters to rank twelve must-have offensive security tools, including Burp Suite, NMAP, CrackMapExec, Metasploit, BloodHound and Impacket, with commentary on each.

AWS Signer 2.0 for Burp Suite signs or re-signs AWS API requests with SigV4 as they pass through the proxy, adding a new UI, profile management, and multi-source profile import for pentesters.